Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36332e302f32342d3234203d3e203630373231.roa
File: 37372e33372e36332e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: lA9ZFZm9P/LPCXK0VLddnzMrZqY5tena7nyh3Ai6+WQ=
Subject key identifier: 4F:01:39:05:21:63:31:7E:DB:82:C0:45:2C:81:9D:43:75:EB:DA:5F
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 3F7D7E26BD0613C9CEEFEB023EB8B77B7FFB30AA
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36332e302f32342d3234203d3e203630373231.roa
Signing time: Wed 01 Mar 2023 16:34:35 +0000
ROA not before: Wed 01 Mar 2023 16:29:35 +0000
ROA not after: Wed 28 Feb 2024 16:34:35 +0000
asID: 60721
IP address blocks: 77.37.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:7d:7e:26:bd:06:13:c9:ce:ef:eb:02:3e:b8:b7:7b:7f:fb:30:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 1 16:29:35 2023 GMT
Not After : Feb 28 16:34:35 2024 GMT
Subject: CN=4F0139052163317EDB82C0452C819D4375EBDA5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:7a:1b:fe:45:3b:c1:5e:53:99:8f:bd:82:
0d:9b:bd:92:93:8f:26:16:9d:dd:cf:8b:07:29:a2:
d5:dc:cb:9c:fb:2e:73:c8:24:08:36:aa:6a:b0:2f:
53:d7:5a:1d:e0:a8:41:9f:72:39:c1:37:65:3b:6e:
d9:27:f8:a1:97:a9:ab:09:4a:31:59:37:84:3f:49:
00:72:72:5b:06:81:93:13:ff:7d:cc:16:40:a3:d2:
a9:89:c0:ff:81:34:08:e0:0d:30:18:0e:53:08:84:
e7:28:f7:e7:fa:6e:db:fa:15:6b:79:d7:a2:49:b4:
42:15:d1:05:59:77:6a:cb:ed:63:44:39:ce:ac:4c:
fe:d4:1e:f8:6d:5a:a5:1d:54:7f:24:4f:66:41:33:
fc:9d:4b:3a:f1:64:5a:48:e1:68:82:1b:12:89:ae:
c3:84:11:4b:82:26:6c:c9:e0:90:c6:13:ec:70:06:
c8:a7:29:13:87:0d:6b:0b:b9:a7:38:02:49:92:2a:
c2:34:15:0e:84:c8:91:02:e9:69:23:e5:a2:fa:02:
e6:be:08:19:ef:07:58:5a:44:93:7c:80:03:d9:08:
1e:5a:bc:f4:6d:48:29:e8:04:d7:3f:63:5c:67:e0:
fd:87:19:04:15:85:64:78:e4:c2:f7:f7:78:da:39:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:01:39:05:21:63:31:7E:DB:82:C0:45:2C:81:9D:43:75:EB:DA:5F
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36332e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.63.0/24
Signature Algorithm: sha256WithRSAEncryption
19:56:77:69:db:91:29:09:8b:91:29:eb:8f:49:b5:96:11:33:
d6:a9:9f:a8:c5:ce:d0:48:2c:b4:8a:cf:24:6c:a8:9c:6e:41:
93:39:c2:8f:5a:28:9b:c4:d7:82:6e:62:69:0d:d1:e7:15:07:
c8:eb:39:04:66:04:0a:ec:4e:94:8b:21:30:5a:0b:29:b6:c2:
7d:77:5c:e0:bb:e3:4e:0a:a8:05:1a:6f:7f:9a:aa:14:bf:6a:
c3:a2:7b:fd:0d:09:74:3d:47:4a:5c:6c:a6:ec:82:b3:23:09:
fc:74:28:de:f2:4d:97:d7:a8:89:da:0a:25:c6:9f:cd:5d:b7:
3a:c0:d7:2f:82:34:41:ce:e0:36:29:29:af:5f:e5:a5:5e:01:
36:0f:3c:97:af:cf:48:7f:d9:93:95:f4:d3:f1:6a:0a:8b:5a:
7b:e0:ae:1f:03:93:90:a7:a3:a5:21:96:cb:fe:d1:e1:02:35:
a1:a5:ea:5a:48:d8:99:62:74:67:f9:da:1d:83:e7:d6:60:11:
88:2d:2f:83:4b:81:34:99:46:37:50:90:66:3c:99:14:8b:a8:
27:47:a4:98:75:e7:c8:9f:ce:49:0f:68:6c:33:0b:b8:55:8f:
47:e6:a3:1f:fd:0a:00:08:4b:95:52:19:74:90:ea:54:5a:a2:
a0:20:4c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org